CVEvulnerability

CVE-2026-104030

5.5 MEDIUM Published 2026-10-05 Modified 2026-10-28 Official page ↗
Status
Analyzed
Published
2026-10-05
Last modified
2026-10-28
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-125

Description

A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service (DoS) by submitting a specially crafted passkey authentication token that lacks null terminators. The authentication service reads past the end of the provided memory buffer, causing the process to crash and disrupting authentication services.

Affected configurations

• fedoraproject sssd 2.12.0 • redhat openshift container platform 4.0 • redhat enterprise linux 7.0 • redhat enterprise linux 8.0 • redhat enterprise linux 9.0 • redhat enterprise linux 10.0

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References